7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
64.0%
Severity: Low
Date : 2021-07-20
CVE-ID : CVE-2021-22235
Package : wireshark-cli
Type : denial of service
Remote : Yes
Link : https://security.archlinux.org/AVG-2160
The package wireshark-cli before version 3.4.7-1 is vulnerable to
denial of service.
Upgrade to 3.4.7-1.
The problem has been fixed upstream in version 3.4.7.
None.
It may be possible to make Wireshark before version 3.4.7 crash by
injecting a malformed DNP3 packet onto the wire or by convincing
someone to read a malformed packet trace file.
A remote attacker could crash Wireshark with crafted DNP3 packets
through packet injection or a crafted capture file.
https://www.wireshark.org/security/wnpa-sec-2021-06
https://gitlab.com/wireshark/wireshark/-/issues/17462
https://gitlab.com/wireshark/wireshark/-/merge_requests/3477
https://gitlab.com/wireshark/wireshark/-/commit/490fe2684bf63cf4fe03e6495c9ef74c8bc86a2b
https://security.archlinux.org/CVE-2021-22235
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ArchLinux | any | any | wireshark-cli | < 3.4.7-1 | UNKNOWN |
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
64.0%